password validation changed