updated password signup rules to require min 6