Password must contain at least 6 characters and one uppercase letter.

As the password is stored as a hash in a database, I added validation before the user is created.
Or it could just return a boolean value and exception raising could remain in `signup` and `change_password` methods themselves.