Check for and warn about passwords that match user's name, alias, or handle

This shouldn't be possible during new user sign-up, but there have been ways
to curtail checks and generate user accounts with login names and passwords
that are the same sequence of characters, unfortunately.