added more strict password requirements