fixing password validation