validates that user password is at least 6 characters