password constraint updated