change password min_length 8 to 4