It always makes me cranky when a web site has password rules but doesn't tell you about them up front. What do you think about adding a "minimum 8 characters" label next to the password field?