add '@' and '#' as allowed chars for passwords

Allow using '@' and "#' for passwords. Addresses #1309