update rate logic only missing update user's LastUpdateTime in db as it mess w the password field