fix password check on modify, integrate policy check to password indicator