Validate password on change as well
Usernames no longer required on signup

They are instead set to a sensible default and
can be changed later in settings
Better username validation message
Nicer error message display
Reserved usernames in settings.rb