fix password validator