bug fix in the handling of $messages variable in PasswordStrength.php