finsh password validation