validation for a new password