added validation for user password