add regex validation to makes sure only passwords that Aspnet Identity
likes are saved into the database