update settings.py and forms.py
insert django-passwords and enforce strong passwords