adding note about how to handle password option validation