Use same user/password restrictions as in the webapp.

- no uppercase allowed in usernames,
- password length min to 8

Closes #5894.