update password length