updated the way passwords are done. added password validator for user model