enforce min password length on both FacilityUser.set_password and FacilityUserForm
disable checking of raw_password if it's None
correct failing tests from password length enforcement