added validation on password min and max size