simplify update_password and delete_user