added notes about paging and password policy