What rules are there for password assignment? The new password must be different from the previous 1 password(s)  May not contain the user's use...