working on password validation