HR account locked / invalid username when applying patch 20000288

I'm applying patch to 20000288 to eBusiness 12.1.3

Initially, I was getting the HR account is locked.

I unlocked it, and run

alter profile AD_PATCH_MONITOR_PROFILE limit failed_login_attempts unlimited;

and alsp

alter profile default limit failed_login_attempts unlimited;

but it was then failing with invalid username/password

I've run FNDCPASS to set HR password to the default HR in case it didn't like the previous password.

I can sqlplus HR/HR and this works, but it's still failing with invalid username/password

does anyone know where adpatch is picking up the HR password from and does anyone know why it's not picking up the new password?