added more password specs