Fixed password validation