Enforce minimum length on user password.