Use same user/password restrictions as in the webapp.

- no uppercase allowed in usernames,
- password length min to 8

Closes #5894.
Merge remote-tracking branch 'refs/remotes/ivan/bug/use-same-user-and-pass-restrictions-as-in-the-webapp' into develop