https://blog.codinghorror.com/password-rules-are-bullshit/