add update password function