try using a password length check