have password reset form check the password validation rules as well