UX feature: heads-up for new users about minimum password length 

Yeah, we would need to set those ivars again on the `create` action.