Issue 2943 auth password length range

@6a68 - mind reviewing? This is a whole series of updates prompted by your comments in mozilla/browserid#2944. I have moved the password length verification into the validation.js file and out of user.js.

I then cleaned up the tests to test both authentication password length ranges and new password length ranges, using a generic set of tests in all necessary locations.