fix password length in User entity