notify the user if the password is too short