BUGFIX: change password SQL query

no "AND"...