not allowing spaces in passwords seems like a pretty big red flag that the underlying code is crap