updated requestNewPwd + access on pwdHashLocal