password minimum length is set to 8