update password is hidden on account.tpl.html