now no longer require password confirmation when updating settings