min length password isssue