lowered minimum password length to 4