Patched password_policy to fix consecutive char constraint #3258

Their regex was bad and it should feel bad.