fix password length check