added validation group for password length