Sessions with password update