password must hav at least one number, one lowercase and one uppercase letter