Update User.php

Change minimum length of username, password to 8