remove password length validation