require a password of 10 characters or more