database updates

updates password in database, still need to be able to confirm update