password validation in javascript 2017