Passwords should be at least eight characters long and contain at least one letter and one number