added password requirements