throwing error on bad combos of password & security