Modified error strings

The "too short" error string used the deprecated 'font' tag, and
the username string incorrectly stated that the password could not
_be_ the username, when in fact the password cannot _contain_ the
username.