users update password (progress)