Update password advice as requested, changing to html

Fixes #1959