cannot change password - validation