fixed some issues with user update method
added password functionality