https://thefullcircleacademy.com/implementing-strong-password-policies/