added SQL to update password