added password length validations