Remove 'X-UA-Compatible' meta element
Add password policies