Fix up SUEXEC and TBERROR error handling so that <XMP> tags are not
included in the email message!
Add CHECKURL() function (which will eventually replace VERIFYURL())
which returns error strings instead of calling USERERROR. This is
in support of new forms code.
Add CHECKPASSWORD() function; same code was in three different places.
This version returns the error string from checkpass.