changed routes for locations, lowered password minimum to 5 characters