new method to update user password