Min Password Length vs Block Common Passwords

[codinghorror (Jeff Atwood)]

We should probably disallow setting password length under 8. Can you add that validation to the site settings file @techAPJ