password validation user create resolves #33