password minimal length changed