password req update