notes on passwords