AUTH PLAIN: password length has to be its own variable, else it may contain invalid...