allow lowercase mbbs passwords