Validation of admin password should be done by OWASP library

[alansemenov]

Password validation on the admin account creation page (when standardidprovider is opened for the first time on a clean XP instance) is now done by our code, via regex and password length check. It should instead be done by the same dedicated OWASP library we are using for validating a password in app-users.