first commit of request on password length