password validator update