Password validation

set regex validation for 1 upper, 1 lower, and 1 special character. length validation also set -- password must be greater than 6 characters, but less than 20.