Seriously? Who doesn't allow "-" (plain old hyphen) as part of a password? I get maybe not calling it a special character but not allowing it?!? That's new.