adding logic to track insecure passwords