password rules check when you complete them