bare bones getPasswordStrengthCheckWarnings() specs