can now update user password