do size check on user password input