password strength checker + readonly on email