password validate on account activation