Backend validation required for password change API.