- added flag to BadPassword exception class, to signal whether