When resetting password, we are not validating the strength of the new password like we do when users initially set the password https://github.com/urnetwork/web/blob/main/web/bringyour.com/lib-ur/connect.js#L1300-L1302