add custom method to secure update password

and use it in mechanic settings controller