non-working password validation