validate user password and confirmPassword