Whats worse, sites that don’t warrant a complex password that require it or those that do and won’t allow it?