Improvements to new password validation