Only validate password length when password is available