tell users password has to be at least 4 characters long

some users are confused when no submit button appears… maybe because their passwords are too short?