strip whitespace from password