bug fixes in password standards checking