avoid 3 letter passwords being marked as "medium" strength

Currently is is possible to have a 3 letter password that is marked by the check_strength function as a medium strength password.

A 3 letter password is not medium strength, it is weak.

Therefore I have updated the check_strength function to reflect this.