Added password length restriction