Enhance password checks for common bad passwords

[thomasbeaudry]

What Happened?

If you have a username (groupmanager21), you can set the password to be identical to the username and it will be accepted since it's considered "secure enough".

What Did You Expect?

For a system message to tell you that the password can't match the username and for it to reject it.

Operating System

ubuntu

Browser (if applicable)

No response

Steps to Reproduce

No response

Anything Else?

No response

[gdevenyi]

Great idea, we should do even more though, lets integrate this, https://github.com/wKovacs64/hibp