password can now be 4 characters