shortened pw req's to 6 chars