update upgrade documentation with User-Password deprecation note