password .length is the number of one byte or two byte chars?