Password must be at least 8 characters and include an uppercase letter, a lowercase letter, and a number.

New accounts are created suspended by default and require admin activation.