changed password min_length to 6