Add "purpose" to password validity check