Add password validation to user provider