def _change_password(user, password): user.token = create_token(16) user.passwd = User.create_password(password) account_login(user) db.session.add(user)