https://itgeareda.pages.dev/posts/implementing-a-password-policy/