Max confirms 2024 password crackdown, explores adding transactional ads