also ad initial password change: * switch the password field type to `password` * add a field for repeated password
