Include password parameters (must be X number of characters, one capital letter, no special characters, etc.) on both the sign-up and reset password page.