first attempt at password building logic