Add the password rules below the new password field.

fixes #342