Validate '|' cannot be in a password

http://manage.dimagi.com/default.asp?60104

Monkey patches set_password. Displays "'|' is not allowed in a password" as the error in all three possible locations.
Oh sorry, I meant catch it and then have
```
    'flag': e.message,
```

I'm fine if you want to leave it as is.