adding tests for password constraints

in order to refactor them out of the web.rb
encryption: simple_tls doesnt work for me,
env LDAP_PASSWORD_SKIP_VALIDATION added

to skip validation, ONLY! for testing!!!!
extracted validation to own file, with spec tests