Explain the /register/password redirect and reword a registration test comment

crates/handlers/src/lib.rs

@@ -400,7 +400,7 @@ where
             mas_router::Register::route(),
             get(self::views::register::get).post(self::views::register::post),
         )
-        // XXX: hard-coded redirect from /register/password to /register
+        // Keeps links to the former password registration page working
         .route(
             "/register/password",
             redirect_to(mas_router::Register::route()),

crates/handlers/src/views/register/mod.rs

@@ -621,7 +621,7 @@ mod tests {
             .expect("the upstream sessions cookie should be set");
         assert!(sessions[0].get("username").is_none());
 
-        // The password path sees it whole, and the policy rejects it
+        // Password registration keeps the overlong username, and the policy rejects it
         let request = cookies.with_cookies(Request::post("/register").form(serde_json::json!({
             "csrf": csrf_token,
             "username": username,