update password security, error box css, img location