[WFCORE-248] Correct should/must within error messages for add-user

Also check password does not match the username earlier in the validation.