adding password length validation