PUT updateMember

/**
     * updateMember REST API
     *
     * @param member
     * @param password
     * @return
     *
     * Guidelines used:
     * http://howtodoinjava.com/jersey/jersey-restful-client-examples/#put
     */
    @PUT
    @Path("updatemember")
    @Consumes("application/json")
    @Produces("application/json")
    public Response updateMember(Member member, @QueryParam("password") String password) {
        try {
            Connection conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/islandfurniture-it07?user=root&password=290597");

            if (password != null) {
                String passStmt = "SELECT * FROM memberentity m WHERE m.EMAIL=?";
                PreparedStatement passPs = conn.prepareStatement(passStmt);
                passPs.setString(1, member.getEmail());
                ResultSet rs = passPs.executeQuery();
                rs.next();
                String passwordSalt = rs.getString("PASSWORDSALT");
                String passwordHash = generatePasswordHash(passwordSalt, password);

                String stmt = "UPDATE Memberentity SET NAME = ?, PHONE = ?, ADDRESS = ?, SECURITYQUESTION = ?, SECURITYANSWER = ?, AGE = ?, INCOME = ?, PASSWORDHASH = ?"
                                                      + " WHERE EMAIL = ?";

                PreparedStatement ps = conn.prepareStatement(stmt);
                ps.setString(1, member.getName());
                ps.setString(2, member.getPhone());
                ps.setString(3, member.getAddress());
                ps.setInt(4, member.getSecurityQuestion());
                ps.setString(5, member.getSecurityAnswer());
                ps.setInt(6, member.getAge());
                ps.setInt(7, member.getIncome());
                ps.setString(8, passwordHash);
                ps.setString(9, member.getEmail());

                // call executeUpdate to execute our sql update statement
                // http://alvinalexander.com/blog/post/jdbc/sample-jdbc-preparedstatement-sql-update
                int updates = ps.executeUpdate();
                ps.close();
            } else {
                String stmt = "UPDATE Memberentity SET NAME = ?, PHONE = ?, ADDRESS = ?, SECURITYQUESTION = ?, SECURITYANSWER = ?, AGE = ?, INCOME = ? "
                                                      + " WHERE EMAIL = ?";

                PreparedStatement ps = conn.prepareStatement(stmt);
                ps.setString(1, member.getName());
                ps.setString(2, member.getPhone());
                ps.setString(3, member.getAddress());
                ps.setInt(4, member.getSecurityQuestion());
                ps.setString(5, member.getSecurityAnswer());
                ps.setInt(6, member.getAge());
                ps.setInt(7, member.getIncome());
                ps.setString(8, member.getEmail());

                // call executeUpdate to execute our sql update statement
                // http://alvinalexander.com/blog/post/jdbc/sample-jdbc-preparedstatement-sql-update
                int updates = ps.executeUpdate();
                ps.close();
            }

            return Response.status(200).build();
        } catch (SQLException sqlex) {
            return Response.status(999).build();
        }
        catch (Exception ex) {
            ex.printStackTrace();
            return Response.status(Response.Status.BAD_REQUEST).entity(ex.getMessage()).build();
        }
    }