only create user if he doesn't exist yet, also make sure initial password passes quality check, refs #8364
moved from workflow script to event handler, refs #8364
get MailHost properly with getToolByName, refs #8364
extended test, added tearDown, refs #8364