Fix require.digits password policy

'Require digits' policy wasn't being enforced, as the check used a wrong conditional.