Issue #13 - A good point is made that with enough attempts, if an attacker would to have seen the 3 digit code, for each character added, it will be a bit easier to figure out the password.  This fix will make it so that it will only show it after 8 characters.