* Implement password validation mechanism * Add invalid password reason * Always pass user in password validator * Add password validation documentation