admin MDL-20980 Touched up regex that determines weak password salts