make password rules available as setting
user management for admin