minor feature: the underscore character is now supported in passwords