do not break API. add a new function to verify and update password