set max length
require at least 6 characters in password field