totally agree. just to make things worse, the password rule on the client side sometimes does not agree with the one on the server side. XD