https://www.techradar.com/pro/security/okta-fixes-a-rather-embarrassing-but-very-serious-password-flaw