handle exceptions returned by update_password