Move password concerns to Security.
Add default error messages