change password
validate length