changed message to match requirement for password