pw validation added