logic - changepassword