fixed bug: multiple ajax request sent when update password