fixed null password for update