Fixes how password strength list was rendered

Removing `%d` characters and displaying password strength requirements correctly.