Validating password complexity with a custom registration validator