add change password logic