pw length requirement 10 -> 6