fix problem with password validation
remove obsolete todo