fix issues found in updating password