update password to object