https://finboldcoe.pages.dev/posts/implementing-a-password-policy/