re #21 use globale variables for the max and min sizes of password