issue in validating password