added validation for password on update