small password validation #445