added checks for clientside password enforcements (both for admin and receivers)