Passwords must be 8-16 characters, alphanumeric and underscores only, and contain at least one lowercase letter, one uppercase letter, and one number