login 4 character validation + pass