update profile with old password