password validation introduced, tests pass