Must include 8–20 characters: uppercase/lowercase letters, numbers, and at least one special character