WIP #22, first passing test for LoginFormModel; refactored all form models not to reference the module directly; moved expired password validator to a behavior