how to provide a way to user to change their password