Require that all passwords are between 8 and 64 characters

[tw4l]

First steps for #1233

Also fixes account settings password reset form to only trigger logged-in event after successful password change, and adds the missing email to the PATCH endpoint call, both of which were causing the password reset form to fail silently.

Password validation can be extended within the UserManager's validate_password method to add or modify requirements.

To test:

• Log in as admin user and attempt to change password to something shorter than 8 or longer than 64 characters, verify it fails with an error message
• Log in as admin user and attempt to change password to a password between 8-64 characters, verify it works successfully (log out and log back in to be sure)
• Invite a new user, go to the invitation link, and try to set a password shorter than 8 or longer than 64 characters, verify it fails with an error message
• Set a password between 8-64 characters from the user invite link, verify it works successfully (log out and log back in as new user to be sure)

[tw4l]

Need to update some tests and want to add a few new ones, so converting back to draft til those are ready.

[tw4l]

Tests added, ready for review

[ikreymer]

Great start for validation, now have a way of adding additional validation options.