fix updating of password