updated password stuff