Updated the UPGRADE file to reflect the BC breaks of the UserPassword class constraint.