fixed bug with checking for change password id is valid