update user/password.