added initial version of password validator, refs #141