privacy policy
loosen the password policy to 2 classes/8 chars