fix password validation
disallow login if email not verified
disallow spaces
update docstring
Merge pull request #471 from squirrelo/fix-pass-validation

Fix password validation