Password must include upper, lower, and a number (min 8 chars).