fixed undefined constraint Kohana error when updating #1330
add '@' and '#' as allowed chars for passwords #1309