Move password validation into PasswordValidator
Minimum password length is configurable with the min_password_length site setting. FIX: reset password needs to validate password length.