repair bug allowing setting of special characters in UBL passwords that cause "Invalid Login"

Only special characters &, @, $, and ^ work in passwords, but the system allows creation with any special character. It should deny any other special characters and inform the user when they're setting their password which characters can be used.