allow setting campaign password; validate uniqueness of campaign permalink