Allow any character in passwords, especially the less-than symbol (see #6447)