added password validation. All tests pass