fixed password regex