RT#29354: Password Security in Email [xmlhttp validation for selfservice]