added password length verification