fixed change password feature