add password match validation