setting new password, failing