fixed the client side password change code