some kind of pw-validation with js