fix password length verification