#948 Require passwords with at least 6 characters