requirements: 8-16 characters, at least one uppercase (A-Z) and lowercase (a-z) character and at least one digit (0-9)