Min Password Length vs Block Common Passwords

[sam (Sam Saffron)]

@mpalmer

I would expect a PR changing User.max_password_length into a site setting to be accepted,

I am not sure about it, I am on the fence here, it enters the world of too configurable to me