user change pass and role