fixed profile page and password update