lastpass: improved valid()