Make password check work if cracklib fails

- Move form password validation to common.forms.
- Check that cracklib is actually working as intended.
- Add tests.
- Fix bug where second password == '' is accepted.

Change-Id: I3d9efb3a66a0c0449d0509eb454d0c166732b31a