fix the sql to update pwd