Change wording of very weak password, add strength tip, add tests

Fixes #648