ask new users not to reuse valuable passwords

* Fixes #678
* Jenkins: http://jenkins.buttonweavers.com:8080/job/buttonmen-cgolubi1/197/