fix: remove password fields after successfully change password