added password validation. All test are passing