public string ChangePassword(string username, string newpassword)
{
var userId = UserDAO.GetUserIdFromUserName(username);
string errorMessage;
bool success = UserDAO.UpdatePassword(newpassword, userId, out errorMessage);
return "Password change was " + (success ? "successful." : ("unsuccessful. " + errorMessage));
}