adding requirements to username and password