fix bug in password strength checker