implements new credential validation rules; pluggable credential validation support; update related tests
implements cleaning of the internally computed bound password; moved the computeBoundPassword() method into a new PasswordUtils class