added password length checker

This PR includes a simple password strength checker without blocking function. You can use a weak password anyway, but the password field will alert you of that.

fixes #465