password rules and new methods for user