[IM] Password length rules should not be enforced for logging in

It only needs to be enforced when setting one's password.
Merge branch 'master' of https://github.com/opensolutions/OSS-Framework