Gpii 947

http://issues.gpii.net/browse/GPII-947
how are we determining the strength of a password. It would be good to make this configurable.