implemented user password change functionality