Bug with password policy

503 r18064

I can set minimum length to -1
I can set minimum length bigger than maximum length
I can set number of digits required to negative value
I can set number of digits required bigger than maximum length
I can set the sum of number of digits and special character bigger than maximum length (parse special character list, if contains a digit, verify that bigger of the two values is smaller or equal to max length, if not verify if sum is equal or smaller)
Old passwords warn: I can set warn delay bigger than expiration delay (do we allow no warn? in this case values can be equals)