button disabled if password is < medium