validate pw fix