add passwordStrength to default config