change root for authenticated users and add complexity verification for passwords