[feature] password update