removed unnecessary password arg from changePassword