user has secure passwd