add option for setting minimum password length