allow whitespace in passwords