fix tloguser and add updatePwd