Implemented have I been Pwned into registration and change password functionality.