make password field required