validate password length
then change into than