[passwd strength] add STRONG password check(default not enabled) when user sign-up or change-password