Allow special char, and fix password control