sanity checks for config settings
integrated policy checks where users can set passwords

the only thing missing now is the displaying of the password policy in
place.