./update.sh resets devbox password to "devbox"

Running the ./update.sh script resets the password of user "devbox" to "devbox". While this is not a problem for a local VM, it is a security risk for a VM running in the cloud. For the next devbox release, it would be good to fix this so that the password is not reset.