password has to be at least 6 chars long