(must contain at least 9 characters, a combination of upper and lower case characters and at least 1 digit)