Fix #928 min_length[8] validation on password

The min_length[8] duplicates existing validations in valid_password and
doesn't respect setting shorter password length requirements. While it
is not recommended to set a shorter requirement, it should still be
honored by the code, and we certainly don't need to check the minimum
password length twice.