adding validation for password update