Security updates for password_policy and views