add password updating

It closes #70