update password bug fix