add UserName
add password length limit