Update password policy guidelines

Luka Trbojevicrequested to merge
ltrbojevic-password-policy-guidelines into master

This MR updates the password policy guidelines per the discussion in https://gitlab.com/gitlab-com/gl-security/compliance/compliance/issues/1105 to better align with NIST 800-63B and team member feedback

It specifically:

  1. Removes the special character requirement from the GitLab team member section
  2. Specifically states special characters aren't required or even recommended
  3. States our policy is based on, in part, NIST 800-63B
  4. Adds resources for folks to learn more about what makes a secure password
Edited by Luka Trbojevic

Merge request reports