Creating user gives missleading message for bad password

I've tried creating users with a password that includes "@".  That is 
apparently bad, but the error message given simply says unable to create 
and the guidelines say

     * the User Name should be unique in the site.
     * only characters (a..z, A..Z, _, 0..9) for User Name are valid.
     * the input maximum length is 255 characters.

In other words, no guidelines about passwords.

-- 
==Leonard E. Sitongia
   Web Engineering Group
   Scientific Computing Division
   National Center for Atmospheric Research
   P.O. Box 3000 Boulder CO 80307  USA
   [email protected]    voice: (303)497-2454   fax: (303)497-1804