password complexity problem