add hint on how to change the password