Enforce a minimum password length
Add authenticate to the API servlet