fixed password update