password strength meter, and initial warning on passwords