Password must be at least 8 characters long and include at least one uppercase letter and one number.