boilerplate code: update password, add users