Change Password

user can now change their password and is reflected in the database but
no email yet