minor password length changes