web controller refactor (added userManager)
accountController.changePassword() refactor