Add validation to password length