directive for checking strength of password