fix passwordValidatorRule to return always a string (not a confirmed array)