use a base64 encoded password when changing passwords