fix update password backend