min password length is 6