Added something to reject pw if it sucks

Also tested all password combinations. Someone can do this in javascript
if they want... I'm not too familiar w/ JS so yeah