When password < 8 characters, show red indicator rather than "weak"