Use PasswordValidator? also when adding or editing portal users. This is also a fix because the old UserEditFormPage? did not use the setPassword method but stored passwords as plain text.