Checks password for following attributes:
Length is deliberately not checked as it's best to pre-check using standard coding.