Password validation API

[pattruong]

• Currently password validation for format is only done on frontend. This is fine except that API level can be exploited fairly easily by bad actors; aka 1 letter passwords work at the moment. Low-level security risk
• would be useful to use Write vanilla schema validation #21 for this to improve regex performance