user should be able to change its password
user should be able to change its password