filtering user password