decrease min password length a bit