CreateUserController minimum password length = 6