update username and password