Protocol: fix typo and disallow spaces in naked passwords