HaveIBeenPwned creates user anyway
I tried integrating the new haveIBeenPwned() plugin and found out that users are created, even if the password is marked as pwned.
1. code = message? (I think it's good to customize the code in addition to the message for localization purposes)
2. The user is created in the database anyways
{code: "THE_PASSWORD_YOU_ENTERED_HAS_BEEN_COMPROMISED_PLEASE_CHOOSE_A_DIFFERENT_PASSWORD", message: "The password you entered has been compromised. Please choose a different password.", status: 400, statusText: "Bad Request"}1. code = message? (I think it's good to customize the code in addition to the message for localization purposes)
2. The user is created in the database anyways
