fix bug for updatepassword