[WebClient] set password minlength to 6 characters

* Though 8 is recommended, we use 6 chars for testaccount passwords