Exercise 10, password validation