- handle non-ascii passwords correctly