bug fix to handle passwords of character less than 4