adds ability for user to change their own password