Changing the password passed without validation

password changed ignoring APasswordStrategy properties, such as $ minLength other