Add ZXCVBN as a password validator

[ioulian]

https://zxcvbn-ts.github.io/zxcvbn/ is a better password strength checker, but it's heavy and needs to be loaded on demand.