done with password validation