added password strength check