Add password length validation and test