updates bogus passwords