added GET single user
added Change password functionality which is not validated at all
added ability to reset password to dlab<%Y>