a new nonce should be generated anytime the password is updated