Added validation for password length