validate CandidateResetPassword