Validating pwd before creating user and Passport