email and password to sign in; password 4 chars