Fix password length validation (User model)