authentication that password must meet various criteria