add ability to have an optional password policy enforcement on account creation