Add password rule and password change URL Blackwells.co.uk

[homsar]

Overall Checklist

• [x] I agree to the project's Developer Certificate of Origin
• [x] The top-level JSON objects are sorted alphabetically
• [x] There are no open pull requests for the same update

for password-rules.json

• [x] The given rule isn't particularly standard and obvious for password managers
• [x] Generated passwords have been tested from this rule using the Password Rules Validation Tool
• [x] Information has been included about the website's requirements (eg. screenshots, error messages, steps during experimentation, etc.)
• [x] The PR isn't documenting something that would be a common practice among password managers (e.g. minimal length of 6)

All non-alphanumeric characters are rejected, so the Safari default of adding -s fails with the message in the screenshot above.

for change-password-URLs.json

• [x] There is no Well-Known URL for Changing Passwords (https://example.com/.well-known/change-password)
• [x] The URL either makes the experience better or no worse than being directed to just the domain in a non-logged-in state

If not logged in, then after login you are redirected to the main account dashboard rather than the password change page, but it is one click from there to the password change page rather than two from the home page.