add check on password length