User is created even if password is not sufficent

[freddyheppell]

Whilst using the widget and the PHP boilerplate, I discovered that creating a user with a bad password (less than 5 chars) would create the user, but still returns an exception.