Adding in password policy