passwords can now contain spaces