Password strength report

@kspearrin I suggest this be merged with Password hygiene report