Password check for '!:@" at the user signup page

This is the same check that is done at cli and at the 'change password' page. I caught me out when I signed up and tried to publish a package :(