validation on user password fix