fix broken update password flow