create new password update method and remove old