* when forwarding time, read previous time and policy from database, not from client
* extracted default password policy so it can be reused
* when user registers first page is introduction
* if first use (not found) notice is shown, it should be welcoming :)