moved password complexity to security folder