UX feature: heads-up for new users about minimum password length 

In case of an error, shouldn't this be displayed again? Since we're only grabbing the variables on the `new` action, that'd probably not happen, right?