Moved change password validation to service