add length validation to user password