Fix password validation