fixed password validation, added email update form