update without password