strip whitespaces in passwords by default