disallow password hint to be same as password for security purposes