https://www.redlab.be/blog/2014/stupid-password-requirements/