login and pass length checks