Naive first implementation of password strength indicator