Users created from the approval process should always get a password reset email,
although it would be good to send a customised email here
Rewrite the validate_password to just validate the password.
testPasswordValidity does not seem to be working.