fix min-max password