Applying NIST guidelines to improve password security