add password length param