fixed bug setting student year, set minimum password limit to 4