fix for username/password complexity check