new user password validation improvements