Fixed password strength calculation