too big site session life time seems to interfere with the change password feature in the user profile.
when i try to change password from the user profile and site session life time was set to 10 years (in seconds), i got logged out every time i tried it.
when i moved it back to 1 year, things work.
just fyi.. any comments on this weird behavior is welcome.