set minimum password length to 8