password really buggy. need regex