Update password works when correct security question answered, still need textbox for new pw. See line 174