I've checked the update record behavior and everything is setup correctly - it's set to the form submit id, the key column is Userid which is what I'm using, the password on the next step is encrypted... Not sure what else is wrong. the only thing I see that's funny is the PHP code says this:
if (isset($_POST["submitPassword_x"])) // Trigger
instead of "submitPassword" ... but I've tried removing the "_x" and it doesn't help.
After hitting submit, it does go back to the profile page, as if it did something. But it doesn't update it.