It felt weird that form fields were disabled. I would just disable the button until the form is valid.

Generally I support adding minimum requirements to passwords and no maximums, but that's just my opinion.

I'm on mobile so I didn't have a chance to load it all up. I'm interested to check it out later though on desktop