added form validation for password changing