update for password()