correction for password length