Make password strength configurable