update user auth on password change