Changing the password passed without validation

New password changed ignoring APasswordStrategy properties, such as $minLength and other