username and password changes

still a bug