Remove old acceptance criteria
Add note on password security implementation