better password validation on registration page