Users can change password, no more user ID (not really needed)