Password must contain at least one number and one uppercase and lowercase letter, and 8 to 16 characters