I think password validation would be better done in javascript, since it just needs to do a length and matching test. I realize that's different than the way I did the username check, but if it's not too hard, I think it's better for this validation.