[passwd strength] add password-min-length and strong-pwd-required setting
                  check password when user sign-up or change-password