added change password to user settings