1st version of password update