password required to save story. validation works