permissive checks for complex passwords