Password must contain at least 6 characters and one uppercase letter.

As the password is stored as a hash in a database, I added validation before the user is created.
Yes, I do agree with that sentiment. I'd also prefer the `ValidationError`.