fix: password needs to be >= 6 chars (was <= 6 chars)