changed password validation: 6..128 characters