password must be at least 5 characters and
have a special character, e.g. !#$.,:;()