add changepassword.jsp to header and removed password from profile.jsp
fixed notification, add delete notification