Add password strength validation to new password - should be refactored