new password directive added
validation done