fixed the length check on passwords to allow 8 characters, not less