Fixed password length check