Consistent password validation, 6+ under 20 chars