add feedback if user enters weakest password