changed pwd requirement to 4 chars