password with mixed cases spec