remove password length validation in user model