api: save service password when creating and updating