Sign-in that works every time

• Every password you've set works. Some passwords of 8 to 11 characters couldn't sign in, even though sign-up and reset accepted them. That's fixed.
• Password rules up front. Sign-up, reset, and invite pages say "At least 8 characters. Avoid passwords that have shown up in data breaches." If a password is refused, the message says which rule it missed.
• Too many tries? Sign-in now says how long to wait.
• A faster sign-in page, especially on slow connections. If part of a page fails to load, Tumbleweed reloads it once by itself.

These changes went live on October 27.