adding password validations