move password strength lib to a public folder

so it won't be loaded every time