update password working