Do not accept / in secure passwords

Otherwise, this conflicts with URI that contain the passwords.
Merge pull request #991 from vuntz/no-slash-in-secure-pw

Do not accept / in secure passwords