modify validation and add confirm password