Tests for users.forms

I moved the password validation out of the field-specific method into the general form `clean()` method. There were some things about ordering and the population of `cleaned_data` that seemed odd.
I believe this will result in a form-level validation error and not a field-level one.