validation newpass, forgotpass