DRY test

It feels like the test would be less fragile if it used `I18n.t`
rather than duplicating the message.
Test password strength

When a user attempts to change their password, it should fail if the
password isn't deemed sufficiently strong.