user update form && password hashing