fix bug saving user even without authenciation, hide password changer