fixing password constraints for latest waltz, adding fcgi support