I got through the password check with a 35 long string and thought that was over. I was sitting there trying to find the next flag (admin ui 3). If I would have found *that* flag I would have had no way to submit it.