Password complexity ignores empty spaces

Summary

A security researcher discovered that spaces were not counted in our password complexity formula, so a user could enter a password of 8 consecutive spaces and create an account. While the password is ultimately the user's responsibility, this was a clear flaw in our complexity formula.