validate password.