password strength with text and validation