Increase default minimum password length to 10

Hashes of eight-character password can be cracked with relatively cheap hardware/cloud in reasonable time. Use 10 to have a little margin.

See http://arstechnica.com/security/2013/05/how-crackers-make-minced-meat-out-of-your-passwords/