fix password update query