add password validation