rearrange signin/login
set min password length to 6