Make registration disallow wrong passwords. Fixes #402