Password must be at least 8 characters and contain 1 upper case, 1 digit, at least 1 special character (no more than 2)