fixed bug that password validation