Limit password to 6-8 characters #44