set password lower limit to 6