add a requirement not to register the secret password with null character (fixes #3720, BP from #3504)

bug ticket http://redmine.openpne.jp/issues/3504
BP ticket http://redmine.openpne.jp/issues/3720