fix the evaluation of password quality; thanks to the clang static analyzer for point...