min password length pass from 4 to 8