Use regex to provide feedback on password strength