strong password enforcement now works on new user creation as well.