fixed bug with updating user password (added an attribute password to update scenario), production config