Password validation fixed