allow broader range of possible passwords