password validation in javascript using regular expression