added user password validation