updated a mininum password length check we missed before. Should we add more validation here?