password reminders did not need to be that big