added password verification
removed validation of hostname to allow non-ascii values