finished custom validation for user#edit (password related)