add missing reference to terrible passwords