added password length validation to user model