disallow any whitespace characters in passwords