Added server side password strength check to match the client-side JS one.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>