Password policy patch breaks drush make build

There was no version specified for the password_policy module. I believe that the new version released today has that patch incorporated, so the build fails when it tries to patch the module.

I think it should be a rule that if the make file patches a module, it should also declare the module's release version. This would avoid problems like this in the future.