Password must contain at least 6 characters and one uppercase letter.

As the password is stored as a hash in a database, I added validation before the user is created.