Display HTML characters in password confirmation message

HTML special characters are allowed in passwords, but need to be entities to show up properly after user is saved