password login min length fix