https://elanderson.net/2016/03/asp-net-core-password-options-and-custom-validators/