Add zxcvbn to the application as a javascript password checker.
Check in the front end password checker and a better sign in.
Make it clearer that EncryptedPassword shouldn't be passed around as a raw string, make the specs work again.