update password setting