fix user password update bug