add staff will modify password function