Add complexity validation and specs  for User#password