update user hashes the updated password;