requires strong password and a valid email address