added validation to password