check that password must be four digits