password strength: fixing js inclusion issue.
Ensure jqery is loaded before PasswordStrength.

Also, adapt tests to the now working client side validation.
Unfortunately, the positive case is still defunct.