added password match validation