Modified error strings

The "too short" error string used the deprecated '<font>' tag, and
the username string incorrectly stated that the password could not
_be_ the username, when in fact the password cannot _contain_ the
username.