update password validation (user preferences)