added new password rule