fixed a bug with updating the password of a user