Issue 2943 auth password length range

@6a68 - mind reviewing?

A whole series of tests that go along with mozilla/browserid#2944.