Add "Must be at least 8 characters" to password fields.

fixes #264