tweak to password strength comment