Password must be at least 8 and no more than 40 characters long, and it must contain 3 of the following: a capital letter, a lower case letter, a special character, a number.