fixed some bugs in the update password form