remove pw policy from user