fix password length validates