do not allow password to be empty during forgot password