add ARIA and sr-only comment on password strength checks