User study of password policy costs is closed