update db pass, fix some authorization stuff