Updated password policy to match API. An idea for long lived sessions