by default, box Yes/No is Yes
valid_password()