change the password validation to not have a maximum length
add some tests for the controller