allowUsersToChangePassword