Moved bad password list loading to checkPass call

This was done to prevent the bad password list from being loaded up on
every page request.