format code, password strength bug