done password validation