fixing MID-2029 (evaluation of password policy)