tested update password stuff