Enforce Zxcvbn password requirements during setup

[paragonie-scott]

The password you created for your admin account should be held to, at minimum, the same requirements as other users' passwords.

We may even want to make it more stringent (i.e. require a Zxcvbn score of 4).

[kelunik]

See also https://hackerone.com/reports/148903.