Update password in routes