added password minimum length