finished issue#1: add password restrictions.