adding password checks for new user