620 change user password

closes #620