update the password