3-20 characters, letters, numbers, and underscore only
At least 8 characters with uppercase, lowercase, and a number