Amplify - branch access restriction - Old password still works

We have a development branch on amplify that uses the "access control" feature. Our client has requested to change the password so I have updated it and I can confirm the new password works. The issue is that the old password is still active.

I was unable to find any answer in the documentation or the forum. I have tried changing the username, removing the restriction and adding it back but the old password remains active.