fix password validation to happen only on validate_password