Consider switching to zxcvbn as a password strength library

[evan10s]

See https://github.com/dropbox/zxcvbn. Basically, it enforces the overall strength of the password rather than any particular composition, which could make picking a password less frustrating and also makes it easy to reject very common passwords and all that jazz