validation added to password for minlength