add password validation, password validation tests