Pwd length should be less than min length

8 char-long passwords were failing, but not no more.  

@tmcw want to roll a new release?