some more validation for change password.