update db with user passwords