10-character min password length, create account on its own page, 30-day login cookie.