Password validation for Identity provider

* fixes #36