finished write-up for broken auth

app/views/layouts/tutorial/broken_auth_sess/_password_complexity.html.erb

@@ -70,11 +70,19 @@
 				<li>1 special character</li>
 			  </p>	
 			  <pre class="ruby">
-				  validates :password, :presence => true,
-				                       :confirmation => true,
-				                       :length => {:within => 6..40},
-				                       :on => :create,
-				                       <span style="background-color: yellow">:format => {:with => /\A.*(?=.{10,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[\@\#\$\%\^\&\+\=]).*\z/}</span>
+			  # VALIDATE PASSWORD BOTH AT CREATION AND WHEN UPDATING	 
+			  validates :password, :presence => true,
+			                        :confirmation => true,
+			                        :length => {:within => 6..40},
+			                        :on => :create,
+			                        :if => :password,
+			                        :format => {:with => /\A.*(?=.{10,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[\@\#\$\%\^\&\+\=]).*\z/}
+			  validates :password, :presence => true,
+			                         :confirmation => true,
+			                         :on => :update,
+			                         :if => :password,
+			                         :format => {:with => /\A.*(?=.{10,})(?=.*\d)(?=.*[a-z])(?=.*[A-Z])(?=.*[\@\#\$\%\^\&\+\=]).*\z/}
+										
 			  </pre>	
             </div>
           </div>