Changed references back to header.php from newheader.php. Renamed header.php to header_old.php and renamed newheader.php to header.php.
Added session_start check on updatepass.php