added password validation