password validation added