The fresh new UKGC prescribes a rigid password that member web sites must pursue