adds a change password method to user + tests for it