Set default minimum password length to 8 instead of 2

Although I am sure that opinions will differ on what a sensible minimum password length is, anything is better than 2 characters. IMHO this should make non-customized installations a tiny bit safer.