temporary disallow character < in password on new user registration