Reduce pwnedpassword check HTTP request time-out from 2 seconds to 1 second as this blocks the login request, the request should only take a few 10s of milliseconds, so fail faster instead of waiting
Add password test page, this tests all the ways a password could fail including methods which aren't enabled
