Add tighter password requirements. #1840
Store previous user password hashes to prevent re-use. #1849
Admin's can only set temporary passwords. #1841