refresh password when set