Amended apostrophe mangling in _update_password() 

to allow embedded apostrophes to be passed to htpasswd via the shell. A better way (as discussed earlier) will be to use system() or IPC::Open3 calls but because of the way _cmd currently works, this would need a complete re-factor (i.e. parameter passing and output capture) and I don't have the time right now.

Up to you what you decide to do ;)

-andydj