Add password directive

replace this with a simpler loop over the rules testing for validity and using the name in the call to $setValidity