refactoring password complexity