fixes #4167 - non-functional password validation