Password check for '!:@" at the user signup page

This is the same check that is done at cli and at the 'change password' page. It caught me out when I signed up and tried to publish a package :(