added backend pwd strength check