validity of password