password must have at least one uppercase letter, one lowercase letter, one number and one special character