password validation (check out express validator)

[janethuangg]

stuff like password length, including numbers, including capital letters, special characters, etc.

the routes for both sign up and updating password should have validation

(POST /, PATCH /password)