got rid of length requirement on validations of password