client side validation of passwords