Must be at least 8 characters long and include a number and a special character.