allows user to change either confirmation password or original password