fix password update