add password strength indicator