added final requirements to password