add password strength assessment