Using non-alphanumeric characters for password strength