Enforced OWASP password length guidelines