Minor comment, if this is the front-end form you're using for a user to set a new password you can use jQuery to enforce some basic criteria, such as password length, etc.
I see that there is a separate JS file that does this, but you might want to consider using built-in jQuery stuff, which is standard and less error prone.
Minor comment, if this is the front-end form you're using for a user to set a new password you can use jQuery to enforce some basic criteria, such as password length, etc.