https://lecrab.com/2021/05/10/is-it-still-a-good-idea-to-require-users-to-change-their-passwords/