added password change to show_user()