Standardizes OWASP password length requirements