validate password length >= 6