Fixed password validation regex