validation test password todo