Validate password and email

There were no tests. This was motivated by `localhost:8888/auth/create` not working. Haven't resolved that specific issue yet as it was not due to validation, but regardless, these tests were needed.