added password check for invalid chars at signup

This is the same check that is done at cli and at the 'change password' page.