patch user passwds