fix:更新用户时冲掉密码