Testing for Weak password policy (OWASP-AT-008)