bug fix password validator