Don't let you change your password to '#' (bug #3066)