I've gotten it to not show that weird URL after hitting submit (by changing the form to POST instead of GET) but it still doesn't update the password. So I'm not sure what I'm doing wrong. It's just keeping the password to whatever it was originally. And I've removed the action and it does the same thing.