added validator for password len