add flash, correct the test for password length